PT-2023-29975 · Prestashop +1 · Bl Modules Csvfeeds Module +1

Name of the Vulnerable Software and Affected Versions: Bl Modules csvfeeds module for PrestaShop versions prior to 2.6.1 Description: The issue allows a guest to download personal information without restriction due to too permissive access control. This lack of control does not force the...

CVE-2023-46355

CVE-2023-46355—CSV Feeds PRO (PrestaShop) affects Bl Modules csvfeeds module prior to version 2.6.1. The root cause is overly permissive access control that does not require an administrator to authenticate when accessing feeds, allowing guests to download exports and potentially leak personal da...